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ABSTRACT 



Cloud is a growing trend now a days. It is used in almost all growing sectors. It also finds its application in banking sector. Clouds In bank- 
ing sector is used to store the account information of the bank customers. U sing clouds puts the security of the data in a fix. Data integrity 
is not guaranteed. Online transactions are not yet safe to be done. We propose a system that contains Clouds and public auditing scheme 
which provides data integrity check by a Third Party auditor (TPA). The TPA is enabled to perform audits for multiple user simulta- 
neously. Along with the alpha numeric passwords we enable the user to set an image password which uses visual cryptography as its 
underlying mechanism. K-N sharing algorithm is use in this. This effectively increases the security by reducing the risk password hack- 
ing. Our system also provides an additional feature of de- duplication in order to avoid duplications of files stored at the main server. This 
saves the memory usage as well as the bandwidth. Thus our system includes the features of cloud computing with public auditing using 
TPA, Visual Cryptography, and de-duplication. 
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Introduction: 

Online banking is a growing trend and along with it the online 
frauds are also growing. Keeping in mind this growing social prob- 
lem we have done the survey and found that in today's banking sec- 
tor user is provided only with alphanumeric passwords in order to 
secure their accounts. There is no de-duplication check done at the 
administrator level to save the bandwidth and memory. So in 
order to enhance the existing systems security and efficiency we 
propose a system that will provide image passwords along with 
alphanumeric passwords .whenever the user wants to login into 
the account he/she needs to enter both the passwords right. After 
logging in a message will be sent to the user's mail id that he is 
login into his bank account. We introduce a TPA that does public 
auditing of the account by maintaining digital signatures of the 
account data. Any change I the account changes the digital signa- 
ture evaluated by TPA and then it notifies the user by sending a 
message on user's mail id that so and so changes are made to your 
account. An additional feature is added to the administrator field 
of de-duplication. Here whenever the admin updates any docu- 
ment related to the user to the bank database the document is 
checked for its existence in the bank database. If it is already pres- 
ent then it is not updated or stored again. 

Materials and methods: 

K-N sharing: 

For including visual passwords i.e. images we are using K-N shar- 
ing algorithm. In this Shamir's Secret Sharing algorithm a secret 
i.e. an image in our case is divided into 4 parts. Out of these 4 parts 
3 are present with the users and 1 share is with the system server. 
When the authenticated user provides the 3 shares in the order 
which they are required the system provides the 6 th share, and in 
this way the password is completed. 

RSA: 

RSA is an algorithm used for encrypting the users account data 
and store it on different clouds. It is an asymmetric algorithm that 
uses public and private key for encryption and decryption of data. 
The data is encrypted using the public key of the receiver of the 
data and then the receiver using its own private key decrypts the 
encrypted message. 



Md5: 

MD5 is a message digest algorithm. It is an algorithm producing a 
128-bit hash value using cryptographic hash function. This hash 
value is represented as a 32 digit hexadecimal number in text for- 
mat. 



Design Architecture: 
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flow 







Discussion: 

The data owner is the user or the account holder or the administra- 
tor that logins into the system of the bank using the web service. 
Web service is the method for communication between two elec- 
tronic devices. Application server has 2 modules Business logic 
and de- duplication checking modules. Business logic is used as a 
part of program to encode the real world business rules that deter- 
mines how the data can be created, displayed, stored and changed. 
De-duplication module is a module created to store only a single 
copy of each file regardless of how many clients asked to store that 
file. Thus the disk space of cloud servers as well as network band- 
width are saved. Here the servers compute the cloud. TPA is the 
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privacy preserving public auditing module used to evaluate the 
integrity of the data by checking the digital signature calculated 
each time the account is logged out. Database is used to store the 
data. Web service and load balancing modules are responsible for 
load balancing of the data on the cloud. The data is encrypted and 
divided in order to store on the cloud. This job is done by web ser- 
vices. 

Conclusion: 

Aiming at achieving data integrity and security in online transac- 
tions we have introduced a Third Party Auditor who provides pri- 
vacy preserving public auditing by maintaing the original digital 
signature of the data and then comparing it with the temporary sig- 
nature audited each time a user logs out his account in order to ver- 
ify whether the user is authenticated or not. We also introduce 
image passwords along with alpha numeric passwords to enhance 
the password security. De- duplication ensures the memory and 
bandwidth usage wisely. Hence by introducing this system we 
make the current banking system more reliable , secure and safe to 
use. 
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